You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Scammer changed "normal startup" configuration in msconfig

This week marks the second time I've seen this happen (once in Windows 7 once in Windows 10). After a client fell victim to a tech support scammer the computer always boots into safe mode with command line. If you run msconfig and select "normal startup" in the "General" tab this will not remove the safe mode settings. Instead what I have done is choose "selective startup" and just uncheck safe mode.

I tried to look this up last time this happened (maybe a month ago) and just now but my Google-fu is failing me and I haven't been able to find anyone who even reports the same issue. I can make it work but clearly whatever defines "normal startup" has been changed. (maybe an .ini somewhere?) I'd like to fix the problem itself and not just slap on a band aid. Any advice in this regard would be appreciated.

On Windows 7 and later, things get complicated. Windows XP was easy, you could access the MBR and literally edit it and save. Not so any more. In addition, MBR will only work on drives up to 2TB, whereas the newer GPT with UEFI now is pretty much unlimited.